Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
File: aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft (raw, json)
Hash identifier: ZZT/JTeJ+d8QD2hDdK3MQknxlMPp4gOwSQMeSXdp6wU=
Subject key identifier: D5:AA:C8:33:46:6B:8F:14:92:52:4C:6D:34:53:E5:69:FA:B2:61:BF
Authority key identifier: 68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
Certificate issuer: /CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Certificate serial: 019674C2D588093B0288C45BD6A658D0D533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
Manifest number: 04D1
Signing time: Sun 27 Apr 2025 01:00:47 +0000
Manifest this update: Sun 27 Apr 2025 01:00:47 +0000
Manifest next update: Mon 28 Apr 2025 01:00:47 +0000
Files and hashes: 1: VftZMAe-HTAVpMfwxes2FDGztqs.roa (hash: KKajIYpdkVhXrGRISoXddoe+7uEBtFz7JC2M/TbIWjs=)
2: aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl (hash: /wnVtfu1taGP8O1J8qrP6Pn5Q7k/9IKAbyk5alSHLqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:d5:88:09:3b:02:88:c4:5b:d6:a6:58:d0:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c68a45661f90a4059bd8c29a3c967bf92e855
Validity
Not Before: Apr 27 01:00:47 2025 GMT
Not After : Apr 28 01:00:47 2025 GMT
Subject: CN=d5aac833466b8f1492524c6d3453e569fab261bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:6d:b7:3f:23:22:3a:c2:f2:dd:25:7e:7d:
6b:37:8d:85:30:2e:a5:df:b6:14:f6:ad:61:d5:cb:
c1:81:b2:bc:42:23:c2:86:d7:2d:6a:66:5a:c5:c3:
d2:71:70:66:b1:30:2f:86:e1:55:24:b9:19:55:55:
fe:f8:8b:20:c4:e3:83:17:3f:3f:0f:a2:f9:0b:dc:
a6:d9:13:0e:3f:73:ef:ba:56:0e:f0:17:8e:72:9f:
c9:a7:30:01:fe:46:97:30:e8:99:53:44:77:8d:8b:
4c:3b:d5:b9:2c:e5:cd:15:ab:b5:19:bd:a9:a3:98:
22:bf:f1:8c:1e:4e:35:21:61:5f:8e:f1:00:27:f9:
ab:75:0e:11:e3:b4:fc:30:d8:54:fc:29:e4:02:d3:
29:14:9d:16:b3:88:d5:82:46:fe:23:6c:35:67:e4:
56:78:a6:77:f5:c3:9c:47:d9:1b:e1:11:89:6b:68:
fd:f2:27:54:60:87:e0:ee:0d:a1:56:55:b7:34:e1:
37:25:22:37:10:2c:c6:11:9c:46:0f:bb:4d:23:3e:
68:bc:6c:04:95:81:7c:c3:06:41:44:e9:cc:34:a3:
5c:2b:64:66:48:ce:e8:6d:4c:fa:3c:ac:b9:60:a3:
e9:16:43:3d:b5:9e:76:e3:cf:40:00:f4:5c:fb:be:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AA:C8:33:46:6B:8F:14:92:52:4C:6D:34:53:E5:69:FA:B2:61:BF
X509v3 Authority Key Identifier:
keyid:68:9C:68:A4:56:61:F9:0A:40:59:BD:8C:29:A3:C9:67:BF:92:E8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJxopFZh-QpAWb2MKaPJZ7-S6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/39dacc-1c57-4deb-a225-b6207f755267/1/aJxopFZh-QpAWb2MKaPJZ7-S6FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4c:47:ab:d7:c8:26:8a:d6:f6:c0:25:41:fa:1f:84:b5:68:
ef:16:42:76:ac:6b:b0:4a:5d:aa:3e:d2:06:1a:bb:1e:de:49:
83:40:4f:ac:06:be:e3:31:26:1b:56:61:f8:55:3d:7d:e3:34:
6a:43:67:31:4d:37:09:fe:83:82:0b:85:0d:6b:ee:23:1a:53:
8c:74:a7:cf:e0:b7:8d:f1:80:ae:2a:e4:58:a4:cc:7f:7e:0b:
1d:58:de:f1:30:e6:be:ec:78:1f:e8:c1:71:e9:65:57:68:29:
87:2f:ee:32:c5:95:b2:cf:89:7d:6c:f8:cc:0d:7c:aa:42:39:
87:6a:f5:91:4e:1d:53:15:59:3b:3c:20:24:03:0e:ae:9d:53:
1e:e7:a6:47:05:77:39:93:1b:cb:28:ca:e1:2a:ee:6b:26:a5:
69:e2:7f:98:80:a1:cf:c9:ca:c9:85:95:75:42:38:7f:14:91:
7e:40:3e:bc:63:b9:67:2d:f8:ae:91:2c:ac:26:ea:cb:94:2c:
08:b7:03:4d:99:d8:6f:73:f9:6a:a1:2b:9e:42:ad:d0:a8:17:
88:10:43:37:af:40:c5:6e:b5:62:51:85:7e:42:5c:79:25:8f:
77:f7:1a:31:a5:18:28:9c:8b:46:5a:19:7d:ae:0d:70:30:a7:
9e:1d:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:28:00 2025 by rpki-client